Microsoft Technical Takeoff
Nov 27 2023 07:00 AM - Nov 30 2023 11:30 AM (PST)
Microsoft Tech Community

Device in Include and Exclude group

Brass Contributor

When we have a config/update policy1 with assignment:




And we have device1 that is member of Group1 and Group2 what would be the result ?

Is it so that exclude wins over include ?  

2 Replies
In my case sometime ago, tried to push policy and test computer was on Include and exclude group- exclude won scratched my head on why the policy wasn’t applied.
best response confirmed by Oliver Kieselbach (MVP)

Hi @fatshark_2k 


Check out this link:


From the article:

Exclusion takes precedence over inclusion in the following same group type scenarios:

  • Including user groups and excluding user groups when assigning apps
  • Including device groups and excluding device group when assigning apps